
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier: iaNSjYuQL70jfKGNBSq2nMOiaKp6JGz+nUxgPULlzLs=
Subject key identifier: 46:1E:86:7D:02:2C:38:6A:B1:3F:0D:50:A4:14:AC:4B:8F:F9:56:AE
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number: 0892
Signing time: Sun 26 Jul 2026 21:24:31 +0000
Manifest this update: Sun 26 Jul 2026 21:24:30 +0000
Manifest next update: Sun 02 Aug 2026 21:24:30 +0000
Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: Am8GIhRHv4OqbZLvwKhrmO72yEA6ofhtiijvOKDw9eA=)
2: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
3: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Jul 26 21:24:30 2026 GMT
Not After : Aug 2 21:24:30 2026 GMT
Subject: CN=6a667b0e-1405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:dc:d3:09:29:74:86:c4:c1:25:0f:9b:2e:
7d:fe:7b:51:09:6c:f1:a9:81:7f:70:9e:10:80:ae:
2c:b8:e3:21:02:48:c4:e0:29:39:6c:86:a0:ef:86:
eb:4c:a6:30:f6:8c:bb:28:d6:32:1f:6e:3e:a5:b1:
39:5d:a5:56:2f:82:f4:87:90:e1:e3:2c:22:de:97:
11:29:f7:e4:bc:90:2e:a8:46:57:3b:5b:01:a3:df:
65:21:90:05:99:67:39:c7:af:6c:b0:fd:5d:1d:f2:
9f:fc:0e:d7:d6:21:3d:c8:db:25:d2:d0:e6:70:dd:
2b:42:3d:01:6a:b6:b6:f5:7c:7e:a9:5e:dc:63:3c:
7a:e4:6a:3c:d7:90:52:39:be:81:da:03:e7:e4:21:
6a:cb:11:7a:c8:6b:fa:13:a1:f5:0c:07:c9:93:9e:
49:a7:27:9d:ca:a3:43:a8:20:bb:f4:4a:98:31:88:
a2:55:d1:10:40:2f:c5:1b:52:f9:bc:bb:7c:dd:13:
66:13:ae:c2:eb:5c:17:ad:1f:06:11:83:ad:e1:23:
16:8f:d4:a7:fc:29:20:da:7f:03:e5:6d:64:b2:c7:
24:8f:1c:e4:76:bd:62:d2:b8:ce:45:ac:3e:23:ee:
72:23:60:9b:a4:fe:a9:25:63:c3:31:b7:58:69:e8:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:86:7D:02:2C:38:6A:B1:3F:0D:50:A4:14:AC:4B:8F:F9:56:AE
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5f:88:8b:f1:4f:49:ed:95:7a:b9:4f:35:1d:65:dc:12:73:
08:33:eb:39:91:d3:2c:84:cd:04:42:73:0d:1a:fb:d9:4f:bc:
9b:38:12:f5:55:f9:8b:79:f9:c5:5a:d3:6d:55:3e:30:15:55:
08:81:89:68:ca:6d:a3:a8:65:60:81:b8:0f:30:66:f7:f9:07:
81:b8:e4:1d:f6:0a:ab:18:45:23:1e:35:19:47:4c:5f:5a:8d:
96:62:76:aa:89:fb:a4:2c:8d:15:97:15:04:71:bb:98:bc:6e:
0e:dd:5a:a5:16:ca:15:89:70:be:84:16:a6:1d:26:db:05:50:
a6:5b:c8:73:ab:74:73:1c:42:ca:57:dc:0c:19:5a:cb:d6:07:
22:df:f0:b4:26:93:1a:fc:b8:83:2d:71:df:3e:5d:79:6e:00:
29:ee:8c:ff:cf:19:13:f5:18:d5:72:1f:10:21:6f:0d:e3:b2:
16:b4:70:fa:45:b5:b5:5e:f9:84:f5:48:44:92:ec:5e:11:c1:
9c:45:9d:52:8b:1c:3b:7e:e5:6c:4c:c2:83:c7:24:b9:86:fa:
6a:0c:4a:21:b5:99:5b:06:e9:69:64:f3:a2:90:03:e1:51:f2:
e4:90:a9:4c:17:2f:a9:4b:cf:af:41:76:ed:2c:c4:51:4d:50:
a7:a1:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:26:57 2026 by rpki-client